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Abstract 

Optical quantum communication utilizing satellite platforms has the potential to extend the reach of quantum 
key distribution (QKD) from terrestrial limits of ^200 km to global scales. We have developed a thorough 
numerical simulation using realistic simulated orbits and incorporating the effects of pointing error, diffraction, 
atmosphere and telescope design, to obtain estimates of the loss and background noise which a satellite-based 
system would experience. Combining with quantum optics simulations of sources and detection, we determine 
the length of secure key for QKD, as well as entanglement visibility and achievable distances for fundamental 
experiments. We analyze the performance of a low Earth orbit (LEO) satellite for downlink and uplink scenarios 
of the quantum optical signals. We argue that the advantages of locating the quantum source on the ground 
justify a greater scientific interest in an uplink as compared to a downlink. An uplink with a ground transmitter 
of at least 25 cm diameter and a 30 cm receiver telescope on the satellite could be used to successfully perform 
QKD multiple times per week with either an entangled photon source or with a weak coherent pulse source, 
as well as perform long-distance Bell tests and quantum teleportation. Our model helps to resolve important 
design considerations such as operating wavelength, type and specifications of sources and detectors, telescope 
designs, specific orbits and ground station locations, in view of anticipated overall system performance. 

1 Introduction 

Popular classical encryption methodologies rely on assumptions that certain mathematical operations are, and will 
forever remain, difficult to invert. In contrast, quantum cryptography techniques such as quantum key distribution 
(QKD) exploit the fundamentally quantum mechanical nature of reality to offer long-term security that is not based 
on computational assumptions, thereby preserving the security of communications regardless of any advancement 
of computational power [2] . Although QKD has reached the level of maturity sufficient for commercial imple- 
mentation O H], current transmission distances remain limited to the order of 200 km in fibre [SJ |6l [7] and in 
free space [8]. Quantum repeaters have been suggested to overcome this limitation [9], but for such devices to be 
implemented efficiently, quantum memories are vital. However, this technology is not yet ready for application 
to global distances [10]. The use of a free-space link to an orbiting satellite for QKD can overcome this limita- 
tion [lll[Tl[T3[ll[l[T5l[ll[ni|iai^ several implementations are being pursued [I3l |20l llll US |23l |24] with 
projected launch dates as early as 2017 [22]. Continued advances in technology and the growing concern for more 
reliable data transmission security protocols have contributed to making satellite QKD an attractive and feasible 
proposition. 

Using QKD, two distant parties, Alice and Bob, can generate a cryptographic key, random and secret but 
known to both, through the use of a quantum channel (which might be accessible to an eavesdropper, Eve) and 
an authenticated public classical channel. Here we focus on QKD schemes which transmit quantum information 
encoded in photon polarization, which has successfully been demonstrated in long-distance free-space links. There 
are two main types of QKD schemes: prepare-and-measure schemes, such as the seminal BB84 protocol [l] — e.g. 
using a weak coherent pulse (WCP) source with a decoy state method [25] — and entanglement-based schemes, such 
as the BBM92 protocol [26 , where the trustworthiness of the source can be determined by assessing the strength 
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of measured correlations via a Bell test [27 . In either protocol, Eve is unable to gain any information about the 
key without leaving telltale signs that she has been listening, as a consequence of the no-cloning theorem [28 . 

Accordingly, there are two approaches for using satellites to establish long-distance QKD links. One approach 
utilizes the verifiability of entanglement correlations in schemes such as BBM92 with an entangled source, or 
entangling Bell state measurement [29 , on the satellite. These schemes are challenging as they require a satellite 
payload with two telescopes capable of establishing two independent quantum links simultaneously. This imposes 
an additional restriction on the attainable distance between the receivers on Earth, as low elevation angles would 
experience too much atmospheric loss to be useful. 

We focus on the other, simpler, approach in which the satellite is used as a trusted node. The satellite establishes 
a key first with one ground station and then orbits over a second ground station to establish a second key. The first 
key is then encrypted with the second key, and sent to a ground station. This allows the ground station to decrypt 
and obtain the second key. In this way, the two ground stations then share a secret key with which they can securely 
communicate. Because this approach only requires a single quantum link at a time, it is technically simpler, more 
cost-effective, and therefore faster to deploy than the untrusted satellite schemes. The drawback of this approach 
is that the satellite also possesses the secure key with which the ground stations communicate, and thus we must 
mandate (or assume) that an eavesdropper is incapable of interrogating the key storage on the satellite. 

Here we present results obtained from a detailed link analysis model constructed as a part of feasibility studies 
for the Canadian Quantum Encryption and Science Satellite (QEYSSat) mission concept. Encompassing downlink 
and uplink scenarios for each of WCP (BB84) and entangled photon (BBM92) sources, our analysis includes full 
loss and background calculations for one year of satellite passes determined according to precise orbit estimations. 
Quantum bit error ratios (QBERs) and sifted key rates are calculated and used to determine the length of secure 
keys, incorporating finite size effects, obtainable from each pass. We consider operation in a low Earth orbit (LEO, 
altitude up to the order of 1000 km) which has the advantages of having less optical loss and being less costly to 
attain and successfully operate than higher orbits, making it the most favourable scenario in the near term. To 
reduce background noise, the QKD link will operate at nighttime. We thus consider a circular sun-synchronous 
noon/midnight orbit, crossing the equator at approximately noon or midnight local time, thereby optimizing the 
amount of time spent in Earth's shadow. From these we assess the feasibility of a trusted-node satellite platform 
utilizing current technologies to achieve global-scale QKD. 

In addition, we also investigate the capability of this satellite platform to perform long-distance Bell tests [30] 
and quantum teleportation experiments [31 . Bell tests, which are fundamental tests of the underlying nature 
of reality, have to date been performed up to 144 km [32]. A quantum satellite platform has the potential to 
greatly extend this distance, thereby testing the validity of quantum mechanics in a new regime ^33j. Quantum 
teleportation, a precursor to entanglement swapping, allows one to transfer a quantum state from one location to 
another given a source of shared entanglement. This type of experiment has been performed in full (with remote 
preparation and feed- forward) up to 550 m [34 , and simplified (with local preparation and remote feed- forward) 
up to 143 km [35, 36,. 

2 Detailed simulation of photonic quantum communication 

To comprehensively determine the capabilities and limitations of a quantum communication link between the ground 
and a satellite, we first need to construct a realistic numerical quantum optics simulation capable of predicting 
photon rates, entanglement visibilities, and secure key rates [37 . The system we simulate is illustrated in Figure [l] 
consisting of source, quantum channel, and detection. The key stages for this simulation are: 

1. Photons are created in a mode of a Fock space of finite dimension. We chose dimension 7, allowing us to 
perform the simulation with 0-6 photons in each mode considered. Doing so we can incorporate the effects of 
multi-pair emission in down-conversion (for BBM92, Bell tests, and teleportation) and Poissonian statistics 
in weak coherent pulses (for BB84) to high accuracy. 

2. Photons undergo a rotation to simulate imperfectly aligned polarization optics, and appropriate losses are 
applied to the quantum channel. 

3. Photons are measured resulting in count rate statistics, with added noise accounting for background light and 
detector dark counts. A realistic detector efficiency is used. 

4. These statistics are taken in various loss and background count rate regimes to assess optimal and typical 
expected performance. 
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Figure 1: Devices considered in the quantum optics simulation. Each source is modehed separately using the 
appropriate quantum unitary operator. Optical losses are added in the quantum channel, accounting for atmospheric 
losses, and finally the polarization state of the photons is analysed and the photon detection probability evaluated. 
For the WCP source, Alice chooses the polarization to send for each pulse, whereas for the entangled photon source, 
Alice measures one photon of the pair to determine its polarization state. Bob's polarization analysis consists of 
four detectors in a passive polarization analysis apparatus arranged for QKD states. 



Details of the simulations are given in Appendix |C.1| for entanglement-based QKD, and Appendix |C.2| for WCP 
QKD. In both cases, the results of the simulation are inserted into an appropriate key-rate formula to predict the 
number of key bits extractable under given loss and background noise conditions, including fiuctuations caused by 
the finite length of the received key. 

In addition, we simulate conditions for Bell tests [38^ and quantum teleportation [39] between ground and 
satellite (details in Appendix C.3). Both experiments utilize an entangled photon source. The criterion for success 
for the Bell test is to violate the CHSH inequality [40] with 3(J certainty, i.e. three standard deviations above the 
classical limit. For teleportation, success is defined as violation of the cloning limit for polarization visibility [41], 
again with 3cr certainty. With our models, we determine the maximum ground-satellite distance over which these 
experiments are possible for various telescope sizes. 



3 Challenges of quantum transmission in space 

Several effects contribute to deterioration of the optical transmission as it propagates between the satellite and 
ground-based platforms. The mean optical beam will be broadened by diffraction, systematic pointing error, and 
atmospheric turbulence, all of which lead to transmission losses. In addition, atmospheric absorption introduces 
losses dependent on wavelength and atmospheric constituents. We take each of these effects into account in our 
simulation, as discussed below. 

Beam diffraction from the transmitter output depends on wavelength, telescope size and design, and the outgoing 
beam spatial mode. Although it can be mitigated by using bigger telescopes or shorter photon wavelengths, a 
compromise between telescope sizes and costs, and subsequent free-space transmission performance is necessary 
to ensure acceptable outcomes. We find that diffraction is the major loss contributor in a downlink satellite 
transmission. Diffraction also infiuences uplink transmission, but we find that mitigation of this by increasing 
telescope sizes is limited by atmospheric turbulence (see below). 

Atmospheric turbulence arises due to local refractive index fiuctuations caused by temperature variations. This 
effect leads to a broadening of the beam as well as beam wander over time (which for our purposes can be modelled 
as further broadening). Turbulence has no negative effect on polarization-based QKD beyond additional loss [42 — 
indeed, sophisticated filtering techniques can aid in key generation [43 , 44 , 45 , 46 . Turbulence predominately occurs 
in the lower 20 km of the atmosphere and is strongest near the surface of the Earth [47], thus its impact can be 
neglected in the case of a downlink as the effects occur only near the end of the transmission path. For uplink 
transmissions, however, turbulence is important, affecting the beginning of propagation. Turbulence- induced short- 
term transmission jitter (of order 10-100 ms) is significant in certain applications, but for QKD we need only consider 
the total number of photons received, proportional to time-averaged loss. We find this from the long-term averaged 
beam size in the presence of turbulence. The total beam size then comes from the combination of diffraction and 
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Wavelength [nm] Angle from the horizon [degree] 

Figure 2: Simulated atmospheric transmittance at a typical rural location, for propagation at zenith (left) and 
for different elevation angles (right). Coloured lines represent wavelengths of commercially available laser systems. 
Several transmission windows are evident, within which optical transmission would experience low loss. Generally, 
the transmission tends to be better at higher wavelengths, but other factors (e.g. diffraction, sources, detectors) 
must be taken into account to properly determine the best wavelength choice. 

turbulence. Because turbulence does not depend on the transmitter aperture, this imposes an inherent limitation 
on the performance improvement obtainable by increasing transmitter size. For visible wavelengths, turbulence will 
typically dominate diffraction when using a transmitting telescope of more than 25-50 cm diameter. The effect of 
turbulence can be mitigated by choosing a good ground station. An adaptive optics system could also be used to 
compensate the effects of turbulence. 

Jitter in the telescopes and imprecision in the tracking system will cause misalignment with a time scale typically 
~0.1-1 s. As with turbulence fluctuations, this systematic pointing error can be averaged over time as additional 
beam broadening. Controlling for jitter is more challenging on a satellite, thus a downlink will be more vulnerable 
to this effect. The pointing accuracy must be better than the combined beam waist from diffraction and turbulence 
to avoid becoming a dominant source of loss. 

Transmittance through atmosphere is dependent on both wavelength (see Figure |2j left) and angle (Figure [2j 
right), and is a result of the types and concentrations of molecules and particles that are present. Several low- loss 
transmission windows can be found — most notable are those at 665-685 nm, 775-785 nm, 1000-1070 nm, and 
1540-1680 nm, all of which support wavelengths of commercial laser diodes. Using MODTRAN 5 [48 , we model 
atmospheric transmittance of a rural sea-level location with a visibility of 5 km, chosen to approximate ground 
stations near large cities (such stations could be utilized to connect city- wide QKD networks globally). 

Our numerical model incorporates all the aforementioned loss contributions, as well as (wavelength dependent) 
scattering and absorption losses due to receiver optical components and detectors, to determine the expected key 
rates. Diffraction is simulated by discretising the transmission beam intensity profile into a 50 x 50 grid. A radial 
intensity profile comprising 5000 samples spanning 50 m from the centre of the receiver is then calculated following 
Rayleigh-Sommerfeld diffraction as propagated from each point of the transmission profile grid. This discretisation 
allows us to model our final beam profile for a wide range of beam waists, shapes, and telescope designs. Pointing 
error and atmospheric turbulence (in the case of an uplink) is added using a 2-dimensional convolution between 
the calculated diffraction profile and the Gaussian distribution of pointing error and turbulence. The final intensity 
profile is integrated over the receiving area to determine the received power (proportional to the probability of 
receiving each photon). We then add the remaining loss contributions (atmospheric and optical transmissions, 
detector efficiency). For details, see Appendix [A| 
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Figure 3: Loss at 40° from zenith as a function of the outgoing beam waist (FWHM) for a downhnk (left) and 
an uphnk (right). The WCP performs better than the entangled source at large beam waist because the loss from 
clipping can be included in realizing the required attenuation. The optimum for a downlink is to have a beam waist 
as large as possible for a WCP source and a beam waist of half the telescope diameter for an entangled photon source. 
In an uplink, the best beam waist for both sources is smaller then their corresponding value for a downlink because 
of atmospheric turbulence effects. For downlink: wavelength, 670 nm; satellite transmitter diameter, 10 cm; ground 
receiver, 50 cm. For uplink: wavelength, 785 nm; satellite receiver, 30 cm; ground transmitter, 25 cm. (Different 
wavelengths minimize losses — see Sections [s] and [gJ) In both cases, orbit altitude is 600 km with no pointing error. 
Atmosphere is rural sea level. 



4 Beam waist, pointing, and telescope design 

The optical beam waist (here assumed Gaussian), measured at the transmitting aperture, can be engineered by 
changing the curvature of the lenses/mirrors of the telescope. Our simulations show that for a downlink (see 
Figure [sj left), an entangled photon source has optimal loss with a full width at half maximum (FWHM) beam 
waist of half the diameter of the transmitter (consistent with existing literature [49 ). This is because a beam that is 
too small causes exaggerated diffraction, while a beam that is too large will be clipped to the size of the transmitter 
telescope. We also find that the loss due to beam waist for a WCP source becomes effectively constant for any 
FWHM beam waist greater than the transmitter telescope diameter. The reason is that the WCP source must 
emit less than one photon per pulse (on average), and the loss from clipping the outer portion of the beam can be 
utilized as attenuation towards this end. Therefore, Alice can compensate further clipping losses at the telescope 
by increasing her source intensity. The beam waist may be made so large, whilst increasing source intensity to 
compensate, that it essentially becomes a plane wave where diffraction is entirely due to the transmitter's size. 

In an uplink, the turbulence broadening dominates over diffraction, reducing the advantage of a larger transmit- 
ting telescope. In Figure [s] (right), the optimal beam waist reflects the size of the beam where diffraction becomes 
negligible compared to turbulence, and increasing the beam size further has almost no effect on the final beam 
broadening from all sources. Because of this, it is actually better to keep the beam waist smaller, with less clip- 
ping, even if doing so increases diffraction. Because the influence of atmospheric turbulence also depends on the 
propagation angle through the atmosphere, the optimal ratio of the beam waist to transmitter size is a function 
of angle. Continuous readjustment of the beam waist throughout a satellite pass is a significant complication and 
unlikely to return major improvements. Thus, for our calculations we use the same FWHM beam waist as with the 
downlink case so that the diffraction remains based on the telescope size. For all other figures presented here, the 
FWHM beam waist has been fixed to the transmitter's diameter for the WCP source, and to half the transmitter's 
diameter for the entangled photon source. 

Again modelled as time-averaged Gaussian beam broadening, the excess loss due to transmitter systematic 
pointing error is shown in Figure [4j For a downlink (left), the impact depends strongly on the transmitter size, due 
to diffraction. To minimize loss, it is sufficient to reduce pointing error such that diffraction becomes the dominant 
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Figure 4: Excess loss due to systematic pointing error of the transmitter for various transmitter sizes at 40° from 
zenith in a downhnk (left) and in an uplink (right) assuming a two-dimensional Gaussian distribution of the pointing 
error. For our performance analysis we assumed a pointing error of 2 /irad, inducing only up to 4 dB of loss in a 
downlink and less than 1 dB of loss in an uplink. For downlink: wavelength, 670 nm, ground receiver diameter, 
50 cm. For uplink: wavelength, 785 nm; satellite receiver, 30 cm. In both cases, the orbit altitude is 600 km and 
the atmosphere is rural sea level. 

source of broadening. For an uplink, the transmitter size (for transmitters of 20 cm or more) has little impact as 
atmospheric turbulence dominates, rather than diffraction. The goal is then to reduce pointing error below the 
influence of atmospheric turbulence. Under our model, pointing accuracies of better than 2 /irad root mean square 
(RMS), as demonstrated in previous satellite experiments [50], would cause 1-4 dB of loss in a downlink for up to 
a 20 cm transmitter, and less than 1 dB of loss in an uplink for all transmitter sizes. We apply this value for the 
transmitter in our analysis. The receiver only needs to point to an accuracy within its field of view — we assume 
50 /irad, for which sufficient pointing can be easily achieved. 

Modern large telescopes are typically of a reflective design with a secondary mirror placed in the path of the 
beam, therefore blocking part of it (see Figure [sj top- left). We incorporate in our analysis the loss due to a secondary 
mirror centred in the optical beam path, such as a symmetrical Gregorian, Newtonian or Cassegrain design. Because 
we assume a Gaussian beam, this design represents a worst case scenario, providing a lower bound on the expected 
link transmission when using a reflective design. 

The secondary mirror has two effects: it blocks a portion of the beam (Figure [sj top-right) and it alters the 
diffraction (Figure [sj bottom- left). For both, the additional loss depends only on the ratio of primary and secondary 
mirror diameters when considering the far field. Figure [s] (bottom-right) shows that such a design has little impact 
for reasonable primary /secondary mirror ratios. Like beam waist, the effect of blocking the central part of the beam 
is lesser for a WCP source than an entangled source because the transmission power can be adjusted to counteract 
the obstruction loss. On the receiving end, the size of the beam — typically on the order of 10 m — is already much 
larger than any receiving telescope we consider. The loss due to the receiver design is therefore almost entirely 
dependent on the area of the telescope. A reflective design simply reduces the receiving area proportionally. 
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Radial position at the receiver [m] Obstructed area ratio 

Figure 5: Beam profile from a transmitter with a central secondary mirror blocking a portion of the outgoing 
beam (top- left) and the accompanying intensity profile at the transmitter (top-right). The intensity profile at the 
receiving telescope was computed (bottom-left) and the additional loss due to this type of transmitting telescope 
was evaluated for both WCP and entangled photon sources (bottom-right). The impact of this design is less than 
1 dB for an obstruction of up to 6.2% of the area (i.e., a secondary mirror with a diameter of up to 25% the diameter 
of the primary mirror). 
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5 Wavelength considerations 



Diffraction losses decrease for shorter wavelengths, whereas atmospheric transmittance and turbulence losses reduce 
for longer wavelengths. As the magnitudes of these depend on transmitter and receiver telescope sizes, so too will 
the wavelength that minimizes the total loss owing to both effects. For a satellite incorporating a downlink, it is 
preferable to use a robust and space-qualified laser either as a WCP source or as part of an entangled photon source. 
Ideally this would consist of a diode laser module, capable of producing a certain wavelength or wavelengths within 
a very small bandwidth range. However, diode lasers exist only for certain specific wavelengths, limiting the choices 
available (wavelengths we considered are shown in Figure |2|. 

Commercially available detector technology typically fits into two categories. Loosely speaking, these are visible 
(specifically, 400-1000 nm) and infrared (950-1650 nm) wavelengths. Visible wavelengths are typically serviced 
by Si avalanche photodiode (APD) technology capable of >50% detection efficiency with low dark counts and 
maximum count rates in the MHz range [2]. Infrared wavelengths are serviced by either InGaAs APDs or, recently, 
by superconducting single photon detectors. Currently, InGaAs APDs suffer from lower detection efficiencies, higher 
dark count rates, and low repetition rates [2 limiting their usefulness for satellite missio ns}^ Su perconducting single 
photon detectors have made considerable progress over the last few years [52l |53l \53\ [SH [5511561 113 EH |59| , reaching 
high efficiency, low dark counts, and broad- spectrum sensitivity. While promising, current superconducting detectors 
are in the research stage, and all such devices require cryogenic cooling to operate [2], making them impractical for 
low cost satellite missions (especially those incorporating uplinks). 

Si- APDs are a mature technology with low technological requirements for a satellite mission, supporting wave- 
lengths of multiple free-space transmission windows (see Figure|2|. For these reasons, we focus on these wavelengths, 
and calculate losses for commercially- available laser wavelengths in this range for various possible telescope diam- 
eters. Two types of Si-APDs were studied: thin APD (from Micro Photon Devices) detector efficiencies are used 
for wavelengths below 532 nm [60], and thick APD (from Excelitas Technologies, formerly part of Perkin Elmer) 
efficiencies for 532 nm and above [61]. We also assumed a detector dark count rate of 20 cps, in line with the 
capabilities of these detectors. 

6 Results summary 

We calculate the total loss, along with projected background counts, for one year's worth of nighttime satellite 
passes. To determine the background contribution (see Appendix [B| we assume a half-moon at 45° elevation. 
The location used for calculating the artificial light pollution was 20 km from the city of Ottawa, Canada, with 
a latitude of approximately 45° North. This location, at the the edge of the city, represents a scenario where the 
ground station may be linked to a city's ground-based secure QKD network, with the satellite acting as a trusted 
node to establish global quantum-secured links. 

We consider a 600 km circular sun- synchronous noon/midnight low Earth orbit. The orbit is modelled using 
Systems Tool Kit (STK) 9 from Analytical Graphics, Inc. (AGI) We incorporate only satellite elevations 

greater than 10° above the horizon, encompassing a "usable" portion of a pass, as lower angles typically exhibit 
losses too high to constructively add to any of the considered schemes. Under this condition we find 713 usable 
passes over one year, or about 2 passes per night. Notably, the results of the simulations are largely insensitive to 
the selection of orbit height — e.g. lowering the orbit to 500 km does improve the signal-to-noise ratio, but this effect 
is muted by the reduced contact time to the ground station. 

Figure [6| shows examples of passes for the 600 km orbit, including the best, upper quart ile and median pass. The 
best pass is the pass possessing the maximum usable duration, the upper quartile pass is the pass for which 25% of 
all satellite passes have longer usable duration, and the median pass is the pass for which 50% of all satellite passes 
have longer usable portions (and 50% have shorter usable portions). Figure [t] shows the loss and background count 
rates for these passes. We see that an uplink experiences more loss (by ^5 dB) than a downlink with a satellite 
telescope of 1/3 the diameter of the uplink's satellite telescope, due to the atmospheric turbulence. Additionally, 
the background count rate for an uplink is almost an order of magnitude higher than a downlink, owing to artificial 
light pollution emitted upward. Atmospheric transmission loss decreases as the satellite approaches zenith. For an 
uplink, this also means lower loss for background photons, however the ground area imaged by the satellite also 
reduces near zenith, reducing the background photons collected overall. 

To properly determine the optimal wavelength, we examine the secure key length that can be obtained during 
an upper quartile pass. The results (Table [T]) suggest that the common 670 nm laser line is a highly suitable 

■•^ Notably, new techniques such as self-differencing 51 are improving InGaAs detectors such that they may yet become practical for 
satellite missions. 
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Figure 6: Illustration of satellite passes (left) and range and elevation angle of the satellite (right) relative to the 
ground location during the best pass, upper quartile pass, and median pass, i.e. having longest, upper quartile, and 
median usable duration, respectively, of all passes over one year. Left: Best, upper quartile, and median passes 
are shown as thick blue, green, and red lines, respectively (thin lines connect the ground station with the link 
termination points for these passes), with 20 additional example passes (brown dotted lines). The best pass transits 
directly over the ground station (i.e. reaching 90° elevation), while other passes fall to either side. Right: Half of 
all passes have a duration of at least 450 s, only 80 s less than the best pass, yet less than 25% of passes reach 53° 
of elevation from zenith. 
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Figure 7: Loss and detected background count rate during the best pass, upper quartile pass, and median pass for 
a downlink (left) and an uplink (right). The uplink background is mainly due to artificial light and is lower at high 
elevation angle, when the satellite has a smaller field of view area on the ground. Orbit altitude is 600 km. For 
downlink, wavelength is 670 nm and satellite transmitter telescope diameter is 10 cm. For uplink, wavelength is 
785 nm and satellite receiver telescope diameter is 30 cm. In both cases, the receiver applies an optical filter with 
1 nm bandwidth. Ground telescope is 50 cm with pointing error of 2 /irad. Atmosphere is rural sea level. 
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wavelength for a downlink, be this using a WCP or an entangled photon source. The optimal wavelength for the 
uplink is higher, closer to the laser line at 785 nm, owing to the reduction of atmospheric turbulence. Table [l] also 
shows that ^800 nm, typical of spontaneous parametric down- conversion entangled photon sources, would work 
well in both cases (justifying our choice of wavelength in the examples presented above). 



Table 1: Calculated length of distributed cryptographic key for various wavelengths with a WCP (left) and an 
entangled photon (right) source. Of the laser-line wavelengths studied, 670 nm produces the longest key for a 
downlink, while 785 nm produces the longest key for the uplink. Downlink is with a 10 cm transmitter and a 50 cm 
receiver; uplink is with a 50 cm transmitter and a 30 cm receiver. Simulations are of the upper quartile satellite pass 
(in terms of pass duration) with a 600 km orbit, pointing error of 2 /irad, and rural atmosphere (5 km visibility) 
at sea level. Source rate: 300 MHz for WCP and 100 MHz for entangled photon source; detector dark count rate: 
20 cps; detection time window: 0.5 ns. 
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We accumulate key rate statistics for the full one-year set of satellite passes, with various transmitter and receiver 
telescope sizes, to determine the expected number of secure key bits generated each month. Each pass generates 
a secure key independently — gradual accumulation of cryptographic key bits from each satellite pass ensures these 
bits are available for use when required 

We further assume that only half of the nights have clear skies, automatically rendering half the passes unusable 
due to cloud coverage. Actual cloud coverage will depend on the ground station location ultimately chosen. The 
average global cloud coverage on land is between 50-90%, with over 25% of clouds having a thin density [63]. Many 
areas, particularly in drier or more elevated regions, experience less than 20% cloud cover, some having near 0% 
cloud cover [64 . A location with 50% cloud coverage would likely represent a worst case of any site that would be 
reasonably considered. 

The results show that a downlink can generate more secure key bits than an uplink for the same ground and 
satellite telescopes. Furthermore, the WCP source outperforms the entangled photon source, due in part to the 
higher source rate for WCP, and in part to the inefficiency of detecting the transmitter's heralding photon in the 
entangled source. A downlink with a satellite transmitter telescope as small as 10 cm and a receiver of 50 cm could 
be used to successfully exchange a key of 4.5 Mbit per month with an entangled photon source, and 25 Mbit per 
month with a WCP source. In an uplink, a 30 cm receiver telescope on the satellite and a ground transmitter of at 
least 25 cm could produce 0.4 Mbit key per month with an entangled photon source and 3 Mbit per month with a 
WCP source. 

Interestingly, for an uplink, varying the size of the ground transmitter telescope has little effect on the number 
of key bits generated. This is because, for a transmitter telescope of 25 cm or more, turbulence dominates the beam 
divergence, limiting any gains that could otherwise be found by reducing diffraction via increasing the transmitter 
telescope diameter. 

We also determine the long-distance performance of two other important quantum experiments: Bell tests and 
quantum teleportation. For both experiments, we analyse each satellite pass independently to determine which 
pass can perform a successful Bell test or teleportation with 3a certainty. Since data from an entire pass is needed 
for success, we calculate the minimum ground-satellite distance of each successful pass. Finding the greatest of 
these minima from all passes gives the longest distance test achievable with our parameters. That is, at least one 
pass from our simulated year of orbits will be capable of performing the experiment with a 3<j violation while 
maintaining, for the entire experiment, a distance at least the "maximum distance" reported. 

"^One could obtain a larger monthly secure key by combining the raw keys of several passes, thereby reducing finite size effects, at 
the cost of a reduction in the frequency of key accumulation/usage. 
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A downlink reaches a distance of 1700 km in a Bell test and 1050 km for teleportation for a satellite transmitter 
telescope of 10 cm and a receiver of 50 cm. An uplink with a 30 cm receiver telescope on the satellite and a ground 
transmitter of 25 cm would be capable of performing a Bell test at 1350 km and teleportation at over 675 km. Both 
are significantly beyond that which can be achieved on the ground alone. 

For an uplink, exposure to radiation in the space environment is expected to lead to an increase in the dark count 
rate over time [65 , 66 , the degree to which can be mitigated by appropriate shielding. We performed a preliminary 
analysis (see Table [2| that showed a dark count rate on the order of 1000 cps would cause only a minor degradation 
of performance for QKD and Bell tests. Teleportation, however, requires stricter control over radiation-induced 
dark counts. These results provide important guidelines for determining the requirement of radiation hardening. 

Table 2: Effect of higher dark counts in the detectors on the key generation and on the maximum distances of 
fundamental experiments. QKD (with either a WCP source or an entangled photon source) and Bell tests are 
resistant to detector dark count rate increase of up to 1000 cps, and both QKD with an entangled photon source 
and Bell tests can still be performed (with reduced efficiency) at 10000 cps. Teleportation is only able to accept 
a dark count rate increase on the order of 100 cps. Wavelength 785 nm, 50 cm transmitter and a 30 cm receiver. 
Orbit 600 km, pointing error 2 /irad, and rural atmosphere (5 km visibility) at sea level. Source rate: 300 MHz for 
WCP and 100 MHz for entangled photon source; detection time window: 0.5 ns. 



Detector 


WCP source 


Entangled 


Max. Beh test 


Max. 


dark [cps] 


key 


source key 


distance [km] 


teleportation 




[Mbit/month] 


[Mbit/month] 




distance [km] 


20 


3.222 


0.440 


1359 


683 


100 


3.109 


0.426 


1283 


660 


1000 


2.292 


0.322 


1039 





10000 





0.012 


660 






Complete results of our quantum satellite performance analysis are given in Appendix [D] It is evident from 
our analysis that a downlink outperforms an uplink in general, and would thus be the preferred option for global 
QKD implementation. However, it should be recalled that a downlink introduces a number of technical challenges 
in addition to those of an uplink. An uplink also allows the source to be easily interchangeable, permitting a 
wider range of experiments and tests. With these considerations in mind, a strong argument can be made that an 
uplink is the better choice to scientifically study global-scale QKD implementations (and other experiments) prior 
to implementing a full-scale (downlink) global QKD system. 

7 Conclusion 

We have presented an in-depth analysis of satellite QKD possible with current technologies. To do so, we constructed 
a detailed link analysis to determine various optimal or near-optimal link parameters and to estimate the length of 
the secure key that would be obtained. We found that the optimal beam waist has a FWHM equal to the transmitter 
diameter for a WCP source, and a FWHM of half the transmitter diameter for an entangled photon source. From the 
available laser diode wavelengths and given the technological and logistical limitations of current photon detectors, 
the laser line wavelength of 670 nm would be well suited for a downlink using a 600 km noon/midnight orbiting 
satellite, and an uplink at the same orbit altitude would benefit more from 785 nm. We also considered the effect 
of pointing error and telescope design, finding that a pointing error of 2 /irad or less and a central secondary mirror 
at up to a quarter of the telescope's diameter would each induce no more than a 1-4 dB increase in the overall loss. 

Finite-size secure key analysis was used to determine that a reasonable satellite QKD system could generate on 
the order of megabits of secure key per month, and successfully perform fundamental Bell tests and teleportation 
experiments at distances on the order of 1000 km. Preliminary analysis of radiation degradation of detectors suggests 
that up to two orders of magnitude increase in dark counts could be tolerated. Many of the key assumptions (e.g. 
atmospheric conditions, systematic pointing error, cloud coverage, artificial background counts, moon location and 
illumination) are on the conservative side and therefore strengthen our confidence in the performance estimates. 
Additional technologies, such as adaptive optics (for which our own analysis is in preparation), could be used to 
further improve performance. Multiple passes (that may not be usable on their own) could also be combined to 
increase the usability and performance. We note that, despite better performance from a downlink, an uplink can 
provide reasonable key rates for an initial demonstration mission, with the additional benefit of more fiexibility of 
a ground based source, as well as a significantly simpler satellite payload. 
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The model we developed allows us to include realistic designs of satellite quantum optics experiments to thor- 
oughly predict their performance. This model can be applied to various scenarios beyond the single link LEO: other 
orbits (medium Earth orbits, geostationary orbits, etc.), double links including inter-satellite links, and various 
other scenarios such as using a reflector on a satellite. 
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A Numerically modelling realistic loss 

To determine the feasibility of satellite QKD, a numerical model was developed to calculate the total loss using 
realistic parameters (Figure[8|. The loss from diffraction is calculated using the Rayleigh-Sommerfeld diffraction [67] : 
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where / is the intensity at the receiver, v is the location at the receiver, v' is the location at the transmitter, and we 
integrate over the surface of the transmitter, S't. /q is the intensity at the transmitter, A is the beam's wavelength, 
and d is the distance from the satellite to the ground station. By using the fact that the beam's profile has circular 
symmetry, we need only calculate the intensity at = (or x = 0) and determine /(r) where r is the radius from 
the centre of the beam. 

The loss from the pointing error is calculated by first determining the distribution over time of the beam centre 
at the receiver. We assume a two-dimensional Gaussian distribution of pointing, given by 
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where a is the standard deviation caused by pointing error. The beam profile with pointing error hi^) is then 
obtained by taking a two-dimensional convolution [68] of the beam after diffraction with the distribution of the 
receiver due to pointing error: 
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For an uplink, we must also incorporate the broadening of the beam due to atmospheric turbulence, on a time 
scale of order 10-100 ms. Averaging over a period significantly longer than this time scale results in a Gaussian 
distribution. From the Hufnagel- Valley model of atmospheric turbulence [47l [69] the waist w of the distribution at 
the receiver is 

W2 — , (4) 
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where tq is the transverse coherence length. 
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with C the elevation angle of the satellite from the ground, h the altitude of the receiver, and C^{z) the refractive- 
index structure constant, given by 



C^{z) = 0.005 94(v/27)^(z • 10-^)'^e 
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(6) 



The parameters v and A depend on the atmospheric conditions. For this paper we used the values A = 1.7 x 
10~^^ m~3 and v = 21 m/s, which are typical values at sea level during nighttime £0^. Once we have the waist of 
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Downlink Uplink 



Figure 8: Sketch of the downhnk (left) and upUnk (right) transmission from a satehite. The variables follow those 
used in the text: St is the transmitter's surface, Sr is the receiver's surface, a is the pointing error, d is the 
distance from the satellite to the ground station, and ( is the elevation angle from ground. r]t is the atmospheric 
transmittance, and the atmospheric turbulence is characterized by ro, the transverse coherence length, and C^{z)^ 
the refractive-index structure constant. 
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the Gaussian distribution we can use a two-dimensional convolution with the intensity profile hi^) that includes 
pointing error to obtain the overall beam profile Isiv). 

Once we have determined the profile of the beam at the receiver, in either the uplink or downlink (where Is = h)^ 
we then integrate it over the receiving area to obtain the received optical power (P), 

h{v)dxdy, (7) 



where is the surface of the receiver. The resulting power is proportional to the average number of detected 
photons. 

The atmospheric transmission and the detector efficiency is then added by multiplying the power with the detec- 
tor efficiency rj^ and atmospheric transmittance rjt at the transmitting wavelength, modelled using MODTRAN 5 
(Figure [2| [48 . In this paper we used a sea- level rural atmosphere. The MODTRAN parameters we used are listed 
in Appendix |Ej Finally the ratio of the final power to the initial power (Pq) is converted into loss in dB and a 3 dB 
loss is added to account for losses in the polarization analyser and coupling loss into the fiber to the detectors. 

i^ = -101og,o(^)+3. (8) 



B Estimating background light 

Background light originates from both natural and artificial sources. Natural sources, such as the Sun, Moon and 
stars, have been thoroughly characterized elsewhere. Artificial sources consist largely of light pollution from human 
activities. Shown in Figure [9) this light pollution was characterized over the surface of the Earth during 1996 and 
1997 by the Defence Meteorological Satellite Program's (DMSP) Operational Linescan System (OLS) [71 . We 
utilize this light pollution data for our calculations. 
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Figure 9: Light pollution from human activities in North America, data from World Atlas of Artificial Sky Brightness 
(Ref. [7?). The inset shows a closer view of the location of the simulated ground site, marked with a cross, 
approximately 20 km outside Ottawa. 
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B.l Downlink 



A receiver which is located at a ground station wih receive hght from bright objects in the sky (e.g. stars) and from 
scattered hght originahy emitted by human activities. Astronomers have characterized the natural brightness of 
the night sky at different locations [73l [TH [75] . Theoretical models and computer algorithms to predict the night 
sky brightness also exist [76 . The contribution of the Moon to the night sky brightness has been studied [77] . 

The nighttime sky brightness due to light pollution can be calculated from the DMSP-OLS data which specifies 
the measured upward fiux emitted at a given ground location [78 . Since the ground-based telescope is pointing 
towards a satellite, it can receive background counts from the Sun's light refiecting off the satellite and into the 
telescope. For our case we will assume the satellite is not illuminated by the Sun. (For our orbit, this will be valid 
for all nighttime passes at most ground station locations.) The overall sum of these contributions amounts to the 
total number of background counts per second: 

iVtot = { (-ffnat + i^art) X 7r(FOV)2 X TTr^ } , (9) 

where is the mean frequency of the laser emitted towards the receiver, Ej^^ is the energy of a single photon of 
frequency uq^ r is the telescope's radius, FOV is the angular field of view of the receiving telescope, and H^at and 
i^art are the natural and artificial sky brightness, respectively, listed in [77 ] [78 ] [76], 



B.2 Uplink 

A receiver located on a satellite is directed towards the surface of the Earth, and thus receives light from natural 
and artificial sources. The primary natural light source is the light from the Sun reflected first off the Moon and 
then off the surface of the Earth towards the satellite. Reflected light from other natural sources is negligible. 
To obtain the background count rates from natural sources, we begin by considering Planck's law for blackbody 
radiation [79] . 

I{v, T) = Ar- {eMhv/kT) - , (10) 

where v is the frequency of the emitted radiation, h is the Planck constant, c is the speed of light, k is the Boltzmann 
constant, and T is the temperature of the emitter. Using the equation at temperatures equal to that of the surface 
of the Sun (about 5778 K on average [79 ) gives an accurate estimate of the spectrum of emitted light. The average 
Earth albedo (quantifying how strongly its surface reflects light) is 30% [79 . The Moon's albedo depends primarily 
on the lunar phase. We used empirical data to obtain the Moon's albedo at a certain lunar phase. We assume 
Lambertian diffusion [69 , i.e. the radiance of reflected light is independent of angle. Consequently, the number of 
photons reflected by the Moon Nyi is given by 

AT -n ^ (^0^^Sun) _p2 /-, -, n 

^>'Moon — ^Moon ^ ''^Moon? V-'--'-/ 

where aMoon is the Moon's albedo, Tsun is the Sun's temperature and i^Moon is the Moon's radius. If the Moon is at 
normal incidence, the solid angle to the area on Earth A seen from the Moon is A/d^j^, where c^em is the distance 
between the Earth and the Moon. Consequently, the number of background photons reaching the telescope after 
Lambertian reflection from the surface of the Earth is 



<^EarthA^Moon ( — ) ^ 



(12) 



where e is the extinction coefficient of the atmosphere, aEarth is the Earth's albedo and is the solid angle from 
which the telescope can be seen from Earth, e takes into account the traversal of light through the atmosphere 
twice: First, light reflected from the Moon reaches the surface of the Earth. Then, this light is reflected into the 
receiving telescope. 

We use the DMSP-OLS data to obtain the number of background counts due to light pollution The DMSP- 
OLS data takes the form of a high-resolution image. The pixel coordinates of this image correspond to physical 
locations on the surface of the Earth, and the pixel values denote the nighttime radiance. This allows us to obtain 
the average radiance L emitted by a certain location due to nighttime activities. We can then directly obtain light 
pollution emitted into the receiver: 

A^night = en [^^^ ' (13) 
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where en is the extinction coefRcient due to hght traversing the atmosphere to reach the satehite's receiver. 
We obtain the total number of background counts by summing the contributions from ah sources: 



N, 



night • 



(14) 



One caveat with this result is that (14), as we calculated, is necessarily an approximation based on data taken almost 
a decade ago, and its accuracy varies seasonally due to changes in composition of the atmosphere. In addition, we 
assume that the radiance L is constant at all frequencies because there is little data on the composition of the types 
of lamps used in a certain region. Some information about the composition of lighting types is expected to arrive 
in the future when the Nightsat mission becomes operational [80 . (14) is nevertheless accurate enough to give a 
reasonable estimate of the expected magnitude of background counts. The background is then used, along with the 
loss, in the quantum optics simulations described in Section [2] to estimate the QBER, raw key rate, and final secure 
key length. 



C Simulating photonic quantum communication 
C.l QKD with an entangled photon source 

To simulate entanglement, a model of a spontaneous parametric down- conversion (SPDC) source is used to produce 
correlated photons, which are then permuted to introduce entanglement. The squeezing operator for the down- 
conversion process is 

S{e) = exp (^e{a[a2 — aia2)^ , (15) 

where aj^ and are the creation and annihilation operators respectively for mode m, and e contains the pump 
power and probability of down- conversion. With this operator applied to a two-mode vacuum, photons in modes 1 
and 2 are always created in pairs. However, as for a real SPDC source, multiple uncorrelated photon pairs are also 
created simultaneously, leading to errors. This model applies to both a pulsed or continuous wave pumping scheme, 
with the former having detection probabilities defined per pulse, and the latter per coincident detection window of 
Alice and Bob's detectors. 

The generated two-photon state, initially of the form \HH) (with each H inside the ket indicating a horizontally 
polarized photon; V, vertically polarized), is permuted to construct an entangled state: |^~) = ^ (|^^) ~ 1^^))- 
The results obtained in this paper do not depend on the specific maximally-entangled bipartite qubit state chosen. 
In modern SPDC sources of entangled photon pairs, the entangled state is created directly, but this permutation 
trick achieves the same results in a way that is computationally much simpler. 

The maximally entangled state has visibility V = 100%, where V is defined as 

Here Ce is the coincident photon counts detected possessing the expected polarization (i.e., anti-correlated polar- 
izations for the |^~) state), and C\j is the coincident counts detected with unexpected (correlated) polarization. 

Next, we simulate realistic degradation in entanglement visibility due to polarization misalignment between 
source and receiver. We apply a unitary rotation to Bob's photon (but not Alice's), leading to some "unexpected" 
coincident counts and hence to degraded visibility. We chose an entanglement visibility of 98%, a pessimistic case, 
as better alignments are readily achieved experimentally [HP. 

After traversing the quantum channel, the photon state is detected. The total loss of the channel, comprising link 
efficiency, receiver optics efficiency, and detector efficiency, is incorporated at this point as an overall efficiency of 
each detector, i.e. T^totai = ^d^optics^iink (where rj^ is the intrinsic efficiency of the detector at the relevant wavelength, 
Coptics is the efficiency of Bob's optics, and r^unk is the efficiency of the channel between Alice's and Bob's telescopes). 
We model our detectors as bucket detectors, producing a classical signal with non-zero probability if one or more 
photons enters the device. Our simulated detectors do not resolve photon number, in line with current commercial 
detectors. We also include a realistic dark count rate of 20 darks/s per detector. 

Due to noise in the detectors, multi-pair emission, and the slight polarization misalignment, the photon will 
no longer be perfectly entangled when it arrives, leading to an entanglement visibility V less than 100%. This 
visibility (or equivalently, the quantum bit error ratio, QBER, 1 — V/2), along with count rates (detector events), is 
extracted for use in feasibility calculations. Examples of these visibilities and count rates for an entangled photon 
source are shown in Figure [lOj Where ideally we would like to possess both a high count rate and a low double- 
pair emission probability, there exists a trade-off between these two properties as an increased count rate leads 
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Figure 10: Entangled photon visibility and coincidence count rate as functions of loss in Bob's channel, for various 
background count rates (BG/s). The entangled source operates at a pair production rate of 100 MHz; double-pair 
emissions and the slight polarization misalignment lead to imperfect entanglement visibility at low loss. At high 
loss, the visibility goes to zero, and the count rate asymptotes to the product of background count rate, the number 
of detectors (four), the ratio of the detection window (1.0 ns) to repetition period (10 ns), and Alice's detection 
efficiency (0.25, i.e. only background counts that arrive in coincidence with a photon detected by Alice are included 
in the rate). 



to increased double-pair probability, and two photon pairs emitted simultaneously will be uncorrelated, leading to 



reduced entanglement visibility. In our simulations we use e — 0.22 (the strength of the SPDC operator in (15)), 
corresponding to an average number of pairs per pulse of 0.1 [82 . 

Finally, we calculate a secure key rate based on the count rate and entanglement visibility, following [83 . The 
final key rate per detected coincident pair is 

R = q{\- H2{E + - f{E)H2{E) - A/iV] , (17) 

where = 1/2 is the basis reconciliation (sifting) factor, E is the QBER, ^ is a security parameter from [83], H2{x) = 
— xlog2(x) — (1 — x) log2(l — x) is the binary entropy function, f{E) = 1.22 is the error correction efficiency, and N 
is the length of raw key. The security parameter A is given by A = 2 log2 l/[2(e — e — eEc)] + Ty^TV log2[2/(e — e')], 
where e is the total allowable probability that the final key is insecure, chosen to be e = 10~^, esc = 10~^^ is the error 
correction failure probability, and e and can be optimized numerically with the constraint e — eEc > e > > 0. 



The key rate in (17), when combined with the output of the link analysis, is the principal figure-of-merit for 



entanglement-based QKD. 



C.2 QKD with a WCP source 

For QKD using a WCP source, the quantum mechanical description of photon creation is the displacement operator: 

D{a) = exp{aa^ — a*a), (18) 

where |ap = /i is the average photon number per pulse. The displacement operator models the output of a highly 
attenuated laser (for small /i). As our detectors (and discrete- variable qubit protocols) are insensitive to the laser 
phase, the displacement operator also describes the incoherent Poissonian photon number distribution assumed in 
security proofs ^84j. As above, polarization misalignment, noise, and loss are applied and the photons are measured. 
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giving a count rate and QBER, which can be used in secure key rate calculations. For the unent angled photons of 
a WCP source, the polarization visibility is defined as 



Here, A^e is the number of detections with polarization parallel to the state that Alice sent (the expected counts), and 
Nu is the number of detections with perpendicular polarization (the unexpected counts). Examples of polarization 
visibility and count rate for a WCP source are shown in Figure [TT] It is notable that the WCP source is slightly 
less resilient against background noise than the entangled source (worse visibility at high loss). This is because a 
noise count must arrive in coincidence with a detection on Alice's side to be considered in an entangled scheme, 
whereas for a WCP source every noise count that arrives in coincidence with a laser pulse time-slice is accepted. 

Because of the Poissonian statistics of photon number in laser pulses, some pulses will possess more than one 
photon, and thus may be subject to the photon number splitting attack [85 where an adversary Eve splits off one 
photon from the pulse and stores it (in a quantum memory) to measure only after Bob reveals his measurement 
basis. Eve then measures the stored photon in the same basis, thereby gaining full information about multiphoton 
pulses in an undetectable manner. 

To combat this attack, the decoy pulse method was introduced, wherein Alice changes the average photon 
number /i of randomly interspersed pulses (decoys) which are not utilized in generating the secure key. Because 
Eve cannot know a priori whether a given pulse is a signal or decoy, the decoy pulses enforce much stricter bounds 
on how much information Eve can gain from multiphoton signals, and thus how much privacy amplification must 
be performed. Using the decoy pulse method, the lower bound on asymptotic key rate per laser pulse is |8^ 

R > q{-QJ{E^)H2{E^) + Qi [1 - H2{E,)]}, (20) 

where = 1/2 is the basis reconciliation factor, Q/i is the signal gain (i.e. the ratio of Bob's detections to pulses 
sent by Alice for average photon number /i), is the quantum bit error rate for signal pulses, f{E^) = 1.22 is the 
error correction efficiency for practical error correction codes, H2{x) is the binary entropy function, and Qi and Ei 
are the estimated gain and error rate for single photon pulses. The key rate is then the gain of qubit pulses, minus 
the information leaked from error correction on all signal pulses, minus the privacy amplification on qubit pulses. 
This key rate is multiplied by the system clock rate or laser pulse rate to obtain secure key bits per second. 

We consider the one-decoy protocol from [86 . In this protocol, Alice randomly chooses to send either a signal 
pulse with average photon number /i or a decoy pulse with average photon number v < ji. and Qz/ are the gains 
of signal and decoy pulses respectively, and Qi and Ei can be estimated from measurable quantities as 

Qi = -^^^^(Que" -Q^e'^'^), (21) 

El = (22) 



Equation (20) quantifies the asymptotic key rate over an infinitely long key generation time, but in order to 
generate a key on a single pass, finite size statistics of the observed parameters must be incorporated. A rigorous 
finite size analysis for WCP QKD is still incomplete, but an ad hoc version can be developed as follows. Firstly, a 
factor N^/{N^ + A^zy) must multiply the key rate since only signal pulses contribute to the final key, where A"^ (A^^^) 
is the number of Bob's received signal (decoy) counts. We assume no bits are required for error rate estimation as 
the error correction algorithm identifies the number of errors precisely. Secondly, the parameters used to calculate 
Qi and Ei must be modified to account for the chance of statistical fiuctuation in their values. Specifically, 10 
standard deviations [87 are incorporated into Q^, Qv, E^ and Ej^ such that the worst case scenario is considered, 
and the probability that the actual values fall outside this range is less than 10~^^. Finally, the parameter A found 



in (17) must also be added, with N = 



The final key rate for a WCP source with finite size effects is then lower-bounded by 

^ ^ (l ^^^j^^ {-Q^fiE^)H2{E^) + Qi [1 - H2{E,)] - Q^A/iV^. (23) 

Given the known /i, N^, Nj,^ e, eEC, bounded Q^, Q^y, E^^ Ej, and estimated Qi, from our quantum optics 
simulations, a secure key rate R can be calculated for each satellite passage. In our simulations we used /i = 0.5 
and V = 0.1. 
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Figure 11: Weak coherent pulse photon polarization visibility and count rate as functions of channel loss in Bob's 
arm, for various background count rates (BG/s). The source operates at a repetition rate of 300 MHz, with an 
average photon number per pulse of 0.5. The count rate here includes only detections that arrive within 1 ns of 
an expected laser pulse from Alice. At high loss, the visibility goes to zero, and the count rate asymptotes to the 
product of background count rate, the number of detectors (four), and the ratio of the detection window (1.0 ns) 
to the repetition period (3.3 ns). 



C.3 Bell tests and quantum teleportation 

For the Bell test, one photon of the entangled pair is measured locally at the source, while the other is sent to the 
satellite. With sufficient photons possessing strong entanglement correlations, the CHSH inequality [40] is violated, 
thereby excluding models of reality which preserve intuitive notions of locality and realism. We take as the measure 
of a successful Bell test the violation of the CHSH inequality, with certainty of 3<j (i.e. three standard deviations 
above the classical limit), within the time of a single satellite passage. The CHSH inequality is given by 

^CHSH = |^((/>a,</>b) - ^(</>A,</>b)I + |^((/>k,</>B) +^(</>k,</>B)l < 2, (24) 

where £^(^a,^b) = (^++ — ~ + ^ )/^totai is the joint correlation at Alice and Bob's measurement 

angles (j)A and (j)B respectively. The Nij are the number of coincident counts between Alice's i and Bob's j detectors, 
where z, j G {+,—}• The simulation begins as with entanglement QKD with the production of entangled photons 



via (18) and channel transmission loss; the only difference is the angles at which the detection polarisers are set. 
From the simulated detection probabilities, we find the value of the CHSH parameter and its uncertainty, and 
thereby determine if the inequality is violated by at least 3a. 

Quantum teleportation simulations proceed similarly, except that as part of the teleportation protocol. Bob 
supplies an additional photon that is interfered with one of the photons of the entangled pair (generated by Alice) 
on a beam splitter. This input photon has an arbitrary polarization state, which is subsequently transferred to the 
distant entangled photon through the teleportation process. Here we consider an entangled photon state generated 
from SPDC as above, with one of the entangled photons sent over the long-distance link to Bob. Bob possesses 
a WCP source, supplying the additional input photon which interferes with the entangled photon arriving from 
the SPDC source. A joint measurement is performed on these two modes, teleporting the WCP polarization state 
onto the other photon of the entangled pair that Alice produced. This measurement requires the two photons to be 
indistinguishable in all modes (spatial, timing, spectral). This mode overlap is achievable but can be challenging 
in real world implementation as it requires very precise alignment and filtering. In the interest of finding the limit 
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Figure 12: Optimized parameters e and a for teleportation as a functions of channel loss in Bob's arm, for various 
background counts per second per detector (BG/s). Here a is the strength of the coherent state, (18), whose 



polarization is teleported, with average photon number |a| . Similarly, e is the strength of the entangled photon 



state from SPDC, (15), with average number of pairs per pulse 2sinh e. As the loss increases, the optimal value of 



both parameters tends to also increase, in order to counteract the reduction in signal-to-noise at the detectors. 



of quantum teleportation to a satellite with current technologies, we focus on the performance with perfect mode 
overlap. 

In the case of a downlink. Bob is located on the ground while the satellite provides entangled photon pairs, acting 
as Alice. In an uplink, the situation is reversed, with the entangled photon source/ Alice on the ground and Bob 
on the satellite. The hallmark of teleportation is that the original photon state is destroyed as it is transferred to 
the new photon. Thus the visibility of the final state should be higher than that possible with an optimal quantum 
doner, i.e. V > Kioner = 2/3 [41 , again with 3a certainty. Here V is defined as in (19) with A^e being the number 
of detections with polarization parallel to Bob's WCP input polarization, and N\j being the number of detections 
perpendicular. 

We also perform numerical optimizations to determine the strengths of the SPDC (s) and WCP {a) states most 



suitable for teleportation. Figure [12] shows that the optimal value of both parameters tends to increase with loss, 
with e always greater than a. Points where the optimal e decreases with loss and the crossing of the curves are most 
likely due to imprecision in the numerical simulation. For our simulations, two representative sets of parameters 
were chosen: £ = 0.41 and a = 0.07 for downlink simulations (where the usable part of a pass is typically around 
35-40 dB of total loss with 180-200 background counts) and £ = 0.55 and a = 0.14 for uplink simulations (usable 
part possessing around 45-50 dB loss and 250-750 background counts). 



D Comprehensive performance analysis 

With the results for loss (Appendix [A| and background counts (Appendix B|, we calculate the QBER and raw key 
rate using the simulation of phonic quantum communication (Appendix [C), allowing us to determine the length of 
secure key that can be obtained for each pass. Examples of the QBER and raw key rate for different passes are 
shown for a WCP source in Figure 13 and for an entangled photon photon source in Figure 14 A WCP source 
can have a higher repetition rate than an entangled photon source, on the order of GHz [88, 89 compared to MHz 
for the entangled photon source [90 . For our simulations, we use a source rate for the WCP of 3 times the rate 
of the entangled photon source. With this we can calculate the length of the secure key for each pass accounting 



for finite size effects. Figures 15 and 16 show the secure key that can be generated monthly for various transmitter 
and receiver aperture sizes. This assumes a cloud coverage of 50%, as discussed in Section [g] The long-distance 
performance of a Bell test and a quantum teleportation are also obtained by analysing the success of each pass 
individually (requiring a 3cr violation of the classical limit). We then compare how close each successful pass comes 
to the ground station to determine the maximum nearest distance which completes a full bell test or quantum 



teleportation, with results shown in Figures 17 and 18 
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Figure 13: QBER and raw key rate during the best pass, upper quartile pass, and median pass for a downlink (left) 
and an uplink (right) utilizing a WCP source. The QBER is significantly higher at low elevations, preventing the 
generation of secure key from the raw key for most protocols when the QBER is above 11%. Altitude, wavelength, 
telescope and atmospheric conditions follow Figure [7| Source rate: 300 MHz; detector dark count rate: 20 cps; 
detection time window: 0.5 ns. 
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Figure 14: QBER and raw key rate during the best pass, upper quartile pass, and median pass for a downlink (left) 
and an uplink (right) utilizing an entangled photon source. The entangled photon source has a higher intrinsic QBER 
than the WCP source, primarily because of multi-pair emissions and a lower source rate. Altitude, wavelength, 
telescope and atmospheric conditions follow Figure j?! Source rate: 100 MHz; detector dark count rate: 20 cps; 
detection time window: 0.5 ns. 
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Figure 15: Estimated key per month with a WCP source for various telescope sizes, assuming half the passes are 
unobstructed by cloud cover. Top: downlink; bottom: uplink. A downlink with a satellite transmitter telescope of 
10 cm and a receiver of 50 cm could be used to successfully exchange a key of 25 Mbit per month, while an uplink 
with a 30 cm receiver telescope on the satellite and a ground transmitter of 25 cm could produce 3 Mbit per month. 
In an uplink, the size of the ground transmitter has little importance because atmospheric turbulence dominates 
diffraction. Conditions are as in previous figures, with a downlink wavelength of 670 nm, uplink wavelength of 
785 nm, and source rate of 300 MHz. 



22 




Figure 16: Estimated key per month with an entangled photon source for various telescope sizes, assuming half the 
passes are unobstructed by cloud cover. Top: downlink; bottom: uplink. A downlink with a satellite transmitter 
telescope of 10 cm and a receiver of 50 cm could be used to successfully exchange a key of 4.5 Mbit per month while 
an uplink with a 30 cm receiver telescope on the satellite and a ground transmitter of 25 cm could produce 0.4 Mbit 
per month. Again, the size of the ground transmitter in the uplink has little importance because atmospheric 
turbulence dominates diffraction. Conditions are as in previous figures, with a downlink wavelength of 670 nm, 
uplink wavelength of 785 nm, and source rate of 100 MHz. 
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Figure 17: Maximum distance of a complete Bell test in a downlink (top) and an uplink (bottom) for various 
telescope sizes. A downlink with a satellite transmitter telescope of 10 cm and a receiver of 50 cm could be used 
to successfully violate the CHSH inequality at 1700 km, while an uplink with a 30 cm receiver telescope on the 
satellite and a ground transmitter of 25 cm could violate it at 1355 km. Jagged contours are an artefact of the 
finite sample of passes. Conditions are as in previous figures for an entangled photon source (100 MHz). 



24 




Figure 18: Maximum distance of a complete teleportation experiment in a downlink (top) and an uplink (bottom) 
for various telescope sizes. A downlink with a satellite transmitter telescope of 10 cm and a receiver of 50 cm could 
be used to successfully perform teleportation at 1050 km, while an uplink with a 30 cm receiver telescope on the 
satellite and a ground transmitter of 25 cm could perform it at 675 km. For small telescope sizes, teleportation 
cannot be performed with sufficient statistical certainty for any satellite pass studied. Again, jagged contours are 
due to the finite sample of passes. Conditions are as in previous figures for an entangled photon source (100 MHz). 



25 



E MODTRAN parameters 



MODTRAN [48 is a software package that calculates atmospheric transmittance, given a list of input parameters. 
These inputs are divided into "cards". Here we list the values we used for these inputs in our calculations. The 
descriptions are based on the descriptions in MODTRAN 5.2.1 user's manual. 



Table 3: Card 1: Main radiation transport driver. 


Name 


Value 


Description 


MODTRN 


M 


MODTRAN band model 


SPEED 


S 


Slow speed Correlated-k option using 33 absorption coeffi- 
cients (k values) per spectral bin (1 cm~^ or 15 cm~^) 


LYMOLC 


blank 


Do not include auxiliary species with model atmosphere 


MODEL 


2 


Mid-Latitude Summer (45° North Latitude) 


ITYPE 


3 


Vertical or slant path to space or ground 


lEMSCT 





Program executes in spectral transmittance only mode 


IMULT 


-1 


Program executes with multiple scattering 


I_RD2C 





Normal operation of program 


NOPRNT 





Normal writing to tape6 and tape? 


TPTEMP 





No surface emission if H2 is above ground 


SURREF 


0.3 


Albedo of the earth 
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Table 4: Card lA: Radiative transport driver cont'd. 



Name 



Value Description 



DIS 

DISAZM 
DISALB 



NSTR 

SFWHM 

C02MX 

H20STR 

03STR 

C_PROF 

LSUNFL 

LBMNAM 

LFLTNM 

H20AER 



SOLCON 
CDASTM 

NSSALB 





365 







f 





blank 




The less accurate but faster Isaac's two-stream algorithm 
is used 

Not using azimuth dependence with DISORT 
Not calculating the spectral spherical albedo of the atmo- 
sphere and diffuse transmittance for the line-of-sight and 
sun-to-ground paths 

Number of streams to be used by DISORT 
Use default TOA solar data 
CO2 mixing ratio in ppmv 

Default vertical water vapor column character string 
Default vertical ozone column character string 
Do not scale default profiles 

The solar irradiance data to be used depends on the spectral 
resolution of the MODTRAN band model 
The default (1 cm~^ bin) band model database files are to 
be used 

Do not read file name for user-defined instrument filter 
function from CARD 1A3 

Aerosol optical properties are not modified to refiect the 

changes from the original relative humidity profile arising 

from the scaling of the water column 

Do not scale the TOA solar irradiance 

Use Angstrom Law description of boundary layer and tro- 

pospheric aerosol extinction data 

Use reference aerosol spectral single scattering albedo val- 
ues 



Table 5: Card 2: Main aerosol and cloud options. 


Name 


Value 


Description 


APLUS 


Blank 


Don't use "Aerosol Plus" option 


IHAZE 


2 


RURAL extinction, default VIS =5 km 


CNOVAM 


Blank 


Don't use Navy Oceanic Vertical Aerosol Model (NOVAM) 


ISEASN 





Season determined by the value of MODEL 


ARUSS 


blank 


Don't use user-defined aerosol optical properties 


IVULCN 





Background stratospheric profile and extinction 


ICSTL 


5 


Air mass character (1-10, l=open ocean, 10=stong Conti- 






nental influence) 


ICLD 





No clouds or rain 


IVSA 





Army Vertical Structure Algorithm (VSA) not used 


VIS 





Uses the default meteorological range set by IHAZE 


WSS 





Default wind speeds are set according to the value of 






MODEL 


RAINRT 





Rain rate (mm/hr) 


GNDALT 





Altitude of surface relative to sea level (km) 
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Table 6: Card 3: Line-of-sight geometry. 



Name 


Value 


Description 


HI 





Initial altitude (km) 


H2 





Final altitude, not used for ITYPE=3 


RANGE 





Not used in this case for ITYPE=3 


BETA 





Not used in this case for ITYPE=3 


RO 





Default mid-latitude radius of the Earth (km) of 6371.23 km 


LENN 





Default 


PHI 





Zenith angle at H2 towards HI 



Table 7: Card 4: Spectral range and resolution. 



Name 


Value 


Description 


DV 

FWHM 


0.1 

2 


Wavelength increment used for spectral outputs (in nm) 
Slit function Full Width at Half Maximum (in nm) 
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